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Title of the Invention 
Method of Pre-Releasing Digital Content and Encryption Key Database for 

Use Therewith 

5 

Technical Field 

The present invention relates to a framework for pre-releasing 
digital content in an encrypted form. More specifically, the present invention 
relates to selecting a release time for the digital content, encrypting the 
10 content with an encryption key, pre-releasing the encrypted content selected 
prior to the release time, and releasing the encryption key at the release 
time. 

Background of the invention 

In many instances, it is desirable to set a release time for 

15 releasing information to the relevant public, thereby preventing such relevant 
public from obtaining and/or accessing and/or using such information until 
such release time. For example, in the recording industry, it is typical that a 
new recording by an artist (a musical artist or group, e.g.) is not released to 
the purchasing public until a selected release time. 

20 Reasons for use of such a release time are many and varied. 

For example, such release time may be employed as a marketing technique 
to generate interest or 'buzz' in connection with the to-be-released 
information (e.g., a new recording by a musical artist, a video copy of a 
motion picture for home playback) prior to the release time. As another 

25 example, the release time is necessary to ensure that ail interested 

information-seekers have relatively equal access to the information (e.g., the 
latest government employment statistics, the latest quarterly report for a 
publicly held corporation) at the same time. Accordingly, no particular 
information-seeker can obtain an advantage over any other information- 

30 seeker by obtaining such information first. In still another example, an 

information supplier may be contractually or otherwise legally bound not to 
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release the information until the release time. Of course, many other reasons 
for employing release times exist- 
Oftentimes, the use of a release time in connection with to-be- 
released information either intentionally or unintentionally results in the 
5 creation of a pent-up demand for such information. As should be 

understood, such created demand for such information 'bursts forth' at the 
release time, and the information supplier may be unable to immediately 
satisfy such demand at the release time, at least initially. 

In the situation where such information is electronically 

10 distributed in a digital form as digital content over a communications 

network such as the Internet or the like, for example, it is oftentimes the 
case that too many requesters are requesting the information / digital 
content from too few content servers. In such situation, it may also be the 
case that the communications network itself does not have the capacity or 

15 'bandwidth' to handle the volume of uploading requests for the digital 
content and/or to handle the volume of downloading digital content. As 
should be understood, wait times for obtaining the digital content in such a 
situation can be excessive. As should also be understood, such situation is 
exacerbated as the size of the downloading digital content increases. 

20 More importantly, such a situation may result in a first digital- 

content-seeker being provided with the digital content well before a second 
merely because the second had a longer wait time than the first. Similarly, it 
may be the case that the first digital-content-seeker can download the digital 
content over a relatively faster access link and the second can only 

25 download the information over a relatively slower access link. In either 
iristance, issues of fairness arise in that the first digital-content-seeker can 
obtain an advantage over the second by having the digital content first. 
Notably, such issues of fairness arise in spite of the use of a release time, as 
was discussed above. 

30 Accordingly, a need exists for a method of allowing an 

information-seeker, and particularly a 'digital-content-seeker, to obtain access 
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to information / digital content at a release time without undue delay, 
regardless of the size of the digital content or the speed of the access link 
through which the digital content is obtained. 

Summary of the Invention 
5 The aforementioned need is satisfied by the present invention 

which comprises a method for pre-releasing digital content, wherein a 
release time for the digital content is determined and the digital content is 
encrypted with an encryption key. The encrypted digital content is 
decryptable by a decryption key corresponding to the encryption key. The 

10 encrypted digital content is distributed to at least one content user prior to 
the release time, and the decryption key for the encrypted digital content is 
released to the content user at the release time. The content user may then 
decrypt the encrypted digital content with the released decryption key at or 
after the release time. In one embodiment of the present invention, the 

15 encryption key is selected from an encryption key database having a plurality 
of entries, where each entry includes a release time for releasing a piece of 
digital content, and an encryption key for encrypting the digital content that 
is to be released at the release time. 

As should be understood, the decryption key is generally much 

20 smaller in size than the encrypted digital content. Accordingly, such 

decryption key may be downloaded or otherwise obtained relatively quickly. 
Moreover, since the encrypted information may be downloaded or otherwise 
obtained over an extended period of time prior to the release time, 
bandwidth issues, wait time issues, size of the digital content issues, access 

25 speed issues, and other similar issues as discussed above are minimized if 
not eliminated, and most any digital-content-seeker can obtain access to 
digital content at the release time thereof without undue delay. 



wo 01/46782 PCT/USOO/42780 

-4- 

Brief Description of the Drawings 

The forgoing summary, as well as the following detailed 
description of embodiments of the present invention, will be better 
understood when read in conjunction with the appended drawings. For the 
5 purpose of illustrating the invention there are shown in the drawings 
embodiments which are presently preferred. As should be understood, 
however, the invention is not limited to the precise arrangements and 
instrumentalities shown. In the drawings: 

Fig. 1 is a block diagram representing a general purpose 
10 computer system in which aspects of the present invention and/or portions 
thereof may be incorporated; 

Fig. 2 is a flow diagram showing steps performed both by a 
content provider in pre-releasing digital content (left side) and a content user 
in obtaining pre-released digital content (right side) in accordance with one 
15 embodiment of the present inventions- 
Fig. 3 is a block diagram of an encryption key database that 
may be employed in accordance with one embodiment of the present 

inventions- 
Figs. 4A and 4B are block diagrams showing encrypted content 
20 distributed from a content provider to a content user in accordance with 

embodiments of the present invention; and 

Fig. 5 is a block diagram representing various elements 

employed to release the encryption key to a content user in accordance with 

embodiments of the present invention. 

25 Detailed Description of the Invention 

Referring now to Fig. 1, the following discussion is intended to 
provide a brief general description of a suitable computing environment in 
which the present invention and/or portions thereof may be implemented. 
Although not required, the invention is described in the general context of 
30 computer-executable instructions, such as program modules, being executed 
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by a computer, such as a client workstation or a server. Generally, program 
modules include routines, programs, objects, components, data structures 
and the like that perform particular tasks or implement particular abstract 
data types. Moreover, it should be appreciated that the invention and/or 
5 portions thereof may be practiced with other computer system 

configurations, including hand-held devices, multi-processor systems, 
microprocessor-based or programmable consumer electronics, network PCs, 
minicomputers, mainframe computers and the like. The invention may also 
be practiced in distributed computing environments where tasks are 

10 performed by remote processing devices that are linked through a 

communications network. In a distributed computing environment, program 
modules may be located in both local and remote memory storage devices. 
The invention may further be practiced in connection with the system and 
method disclosed in co-pending and commonly assigned U.S. Patent 

15 Application No. 09/290,363, entitled ''ENFORCEMENT ARCHITECTURE AND 
METHOD FOR DIGITAL RIGHTS MANAGEMENT" and filed on April 12, 
1999, hereby incorporated by reference. 

As shown in Fig. 1 , an exemplary general purpose computing 
system includes a conventional personal computer 1 20 or the like. Including 

20 a processing unit 121, a system memory 122, and a system bus 123 that 
couples various system components including the system memory to the 
processing unit 121. The system bus 123 may be any of several types of 
bus structures including a memory bus or memory controller, a peripheral 
bus, and a local bus using any of a variety of bus architectures. The system 

25 memory includes read-only memory (ROM) 1 24 and random access memory 
(RAM) 125. A basic input/output system 126 (BIOS), containing the basic 
routines that help to transfer information between elements within the 
personal computer 1 20, such as during start-up, is stored in ROM 1 24. 

The personal computer 1 20 may further include a hard disk 

30 drive 127 for reading from and writing to a hard disk (not shown), a 

magnetic disk drive 1 28 for reading from or writing to a removable magnetic 
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disk 129, and an optical disk drive 130 for reading from or writing to a 
removable optical disk 131 such as a CD-ROM or other optical media. The 
hard disk drive 127, magnetic disk drive 128, and optical disk drive 130 are 
connected to the system bus 123 by a hard disk drive interface 132, a 
5 magnetic disk drive interface 133, and an optical drive interface 134, 
respectively. The drives and their associated computer-readable media 
provide non-volatile storage of computer readable instructions, data 
structures, program modules and other data for the personal computer 20. 

Although the exemplary environment described herein employs 

10 a hard disk, a removable magnetic disk 1 29, and a removable optical disk 
131 , it should be appreciated that other types of computer readable media 
which can store data that is accessible by a computer may also be used in 
the exemplary operating environment. Such other types of media include a 
magnetic cassette, a flash memory card, a digital video disk, a Bernoulli 

15 cartridge, a random access memory (RAM), a read-only memory (ROM), and 
the like. 

A number of program modules may be stored on the hard disk, 
magnetic disk 129, optical disk 131, ROM 124 or RAM 125, including an 
operating system 135, one or more application programs 136, other program 

20 modules 137 and program data 138. A user may enter commands and 

information into the personal computer 1 20 through input devices such as a 
keyboard 140 and pointing device 142. Other input devices (not shown) 
may include a microphone, joystick, game pad, satellite disk, scanner, or the 
like. These and other input devices are often connected to the processing 

25 unit 121 through a serial port interface 146 that is coupled to the system 

bus, but may be connected by other interfaces, such as a parallel port, game 
port, or universal serial bus (USB). A monitor 147 or other type of display 
device is also connected to the system bus 123 via an interface, such as a 
video adapter 148. In addition to the monitor 147, a personal computer 

30 typically includes other peripheral output devices (not shown), such as 

speakers and printers. The exemplary system of Fig. 1 also includes a host 
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adapter 155, a Small Computer System Interface (SCSI) bus 156, and an 
external storage device 1 62 connected to the SCSI bus 1 56. 

The personal computer 1 20 may operate in a networked 
environment using logical connections to one or more remote computers, 
5 such as a remote computer 149. The remote computer 149 may be another 
personal computer, a server, a router, a network PC, a peer device or other 
common network node, and typically includes many or all of the elements 
described above relative to the personal computer 1 20, although only a 
memory storage device 150 has been illustrated in Fig. 1 . The logical 
10 connections depicted in Fig. 1 include a local area network (LAN) 151 and a 
wide area network (WAN) 152. Such networking environments are 
commonplace in offices, enterprise-wide computer networks, intranets, and 
the Internet. 

When used in a LAN networking environment, the personal 

15 computer 120 is connected to the LAN 151 through a network interface or 
adapter 153. When used in a WAN networking environment, the personal 
computer 1 20 typically includes a modem 1 54 or other means for 
establishing communications over the wide area network 1 52, such as the 
Internet. The modem 154, which may be internal or external, is connected 

20 to the system bus 1 23 via the serial port interface 146. In a networked 
environment, program modules depicted relative to the personal computer 
1 20, or portions thereof, may be stored in the remote memory storage 
device. It will be appreciated that the network connections shown are 
exemplary and other means of establishing a communications link between 

25 the computers may be used. 

Referring now to Figs. 2 through 5, wherein like numerals are 
used to indicate like elements throughout, there is shown in Fig. 2 a method 
of pre-releasing digital content (left side), and also a method of obtaining 
digital content (right side) in accordance with embodiments of the present 

30 invention. In the methods, a content provider 1 0 intending to distribute 

digital content 12 to a content user 14 (Figs, 4A and 4B) first determines a 
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content release time (TR) for the content 12 (step 201 in Fig. 2). Such 
content release time (TR) may be any appropriate time; for example, the time 
(TR) may be 12 midnight, 1 a.m., 9:30 a.m., 12 noon, 6:37 p.m. on a 
particular day, etc. If desirable, the time (TR) may be specified with finer or 
5 coarser granularity. 

With a determined release time (TR), the content provider 10 
then encrypts the content 12 (content (C) in Fig. 2) with a selected 
encryption key (EK) (step 203), and distributes the encrypted content (EK{C)) 
prior to the content release time (TR) (step 205). Concomitant with the 

10 distribution of the encrypted content (EK(C)) (step 205), such distributed 
encrypted content (EK(C)) is received by a content user 14 (step 209). 
Notably, the present invention does not require that the release time (TR) be 
determined before the content (C) is encrypted with the encryption key (EK) 
unless the selection of the encryption key (EK) is based on the release time 

15 (TR), as will be described below. The encryption key (EK) may be any 
appropriate encryption key, and may be employed in connection with any 
appropriate encryption algorithm. 

In one embodiment of the present invention, the encryption key 
(EK) is part of an asymmetric key pair that includes a decryption key (DK) as 

20 will be described below. As will be evident from the discussion that follows, 
the encryption key (EK) and the decryption key (DK) are akin to a public key 
and a private key, respectively, although the decryption key (DK) is to be 
made public at the release time (TR). The encryption key (EK) may 
alternatively be a symmetric key, wherein the decryption key (DK) is the 

25 encryption key (EK). However, in the event that the encryption key (EK) is 
to be publicly disclosed prior to the release time (TR), as will be discussed 
below, it should be evident that such encryption key (EK) should not in fact 
be a symmetric key. 

The encrypted content (EK(C)) may be distributed (step 205) by 

30 the content provider 1 0 and received by the content user 1 4 (step 209) by 
any available means before the content release time (TR). In one 
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embodiment of the present invention, the content provider 1 0 distributes and 
the content user 14 receives the encrypted content (EK(C)) over a 
communications network such as the Internet or the like. However, the 
encrypted content (EK(C)) may also be distributed by other means, including 
5 by way of an optical disk, a magnetic disk, or tape; by way of direct 

transmission from the content provider 1 0 to the content user 1 4; by way of 
an electronic bulletin board, by way of electronic mail; by way of regular 
mail; by way of an Internet web page; etc. Moreover, the actual process of 
distribution and receipt of the encrypted content (EK(C)) from the content 

10 provider 10 to the content user 14 may occur by way of several 

intermediate distribution steps; may be based on a request from the content 
user 1 4 to the content provider 1 0 or to an intermediary; or may be 
automatically delivered from a content provider 1 0 or an intermediary to the 
content user 14. Payment for receiving the encrypted content (EK(C)) may 

15 occur, or may not be necessary. 

Preferably, the distribution of the encrypted content (EK(C)) 
occurs a sufficient amount of time prior to the content release time (TR) 
(i.e., with a sufficient amount of Mead time') such that such distribution can 
occur in a relatively orderly manner, with little if any difficulty encountered 

20 by a content user 1 4 when attempting to access a server or the like to 
obtain the encrypted content (EK{C)). Any amount of lead time may be 
employed, although it is to be appreciated that more lead time should ideally 
be provided when demand for a particular piece of content 1 2 is expected to 
be high. As should be appreciated, if it is anticipated that 100,000 content 

25 users 14 will wish to pre-release download a new computer game, 100 days 
of lead time will provide an average of 1 ,000 downloads per day, while 1 0 
days of lead time will provide an average of 10,000 downloads per day. 

A longer lead time is of course desirable since necessary 
bandwidth is reduced. However, a longer lead time also increases the 

30 probability that a nefarious individual will determine how to decrypt the 
encrypted content (EK(C)) prior to the release time (TR). Of course, a 
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shorter lead time is acceptable provided the distribution mechanism has 
sufficient available bandwidth to support the higher download frequency. At 
any rate, a lead time of a month or more could be desirable for distributing 
relatively high demand content 1 2 having a relatively large size, such as for 
5 example a 60 minute recording by a popular musical performer, and a lead 
time of a week or so could be desirable for distributing relatively high 
demand content .1 2 having a relatively small size, such as for example a 
quarterly forecast for frozen orange juice concentrate from the U.S. 
Department of Agriculture. 

10 When the encrypted content (EK(C)) is received by a content 

user, whether it occurs before or after the content release time (TR) (step 
209), the content user 14 preferably stores such received encrypted content 
(EK(C)) in an appropriate storage mechanism. Any such appropriate storage 
mechanism may be employed; for example, the mechanism may be a 

15 magnetic disk or tape, an optical disk, a hard drive, RAM, ROM, etc. As 
should be understood, the content 12 encrypted as (EK(C)) is intended to be 
played back or rendered, ultimately, on an appropriate playback or rendering 
device. Depending on the encrypted content (EK(C)) (text, music, video, 
multimedia, a database, plotting data, etc.), the playback / rendering device 

20 may include or be embodied by a personal computer, a portable personal 
appliance, a digital video monitor, an audio digital playback system, etc. 

As should be understood, the decryption key (DK) for 
decrypting the encrypted content {EK(C)) is released to the content user 1 4 
only at or after the content release time (TR) (step 207, Fig. 2). 

25 Accordingly, such content user 1 4 can receive such content decryption key 
(DK) at or some time after the content release time (TR) (step 211). As with 
the distribution of the encrypted content (EK(C)), the decryption key (DK) 
may be released by any appropriate means; for example, the decryption key 
(DK) may be released by being made generally available on a server or the 

30 like. Alternatively, the decryption key (DK) may be sent to a content user 14 



wo 01/46782 PCT/USOO/42780 

-11- 

by way of an Internet web page, an electronic mail message, a regular mail 
message, or the like. 

In one embodiment of the present invention, the decryption key 
(DK) is released to the content user 1 4 over a communications network such 
5 as the Internet or the like. However, like the encrypted content {EK{C)), the 
decryption key (DK) may also be released by other means, including by way 
of an optical disk, a magnetic disk, or tape; by way of direct transmission 
from the content provider 1 0 to the content user 1 4; by way of an electronic 
bulletin board, by way of electronic mail; by way of regular mail; by way of 

10 an internet web page; etc. Moreover, and also like the encrypted content, 
the actual process of releasing the decryption key (DK) to the content user 
14 may occur by way of several intermediate releasing steps; may be based 
on a request from the content user 1 4 to a key source 1 6 (Fig. 5) or to an 
intermediary thereof; or may be automatically delivered from the key source 

15 1 6 or an intermediary to the content user 14. Notably, and as discussed in 
more detail below, the key source 1 6 is not necessarily the content provider 
10. 

Of course, the content user 1 4 may attempt to obtain the 
decryption key (DK) from the key source 16 prior to the content release time 

20 (TR), although such attempt should fail. In particular, the key source 1 6 is 
trusted not to release the decryption key (DK) for the encrypted content 
(EK(C)) until the content release time (TR). 

Since the release of the decryption key (DK) for the encrypted 
content (EK(C)) occurs at the content release time (TR), and since it is 

25 possible that large numbers of content users 1 4 will wish to obtain the 

decryption key (DK) immediately thereafter, it is possible that a small delay 
can occur in connection therewith. As should be understood, though, the 
decryption key is generally much smaller in size than the encrypted digital 
content. Accordingly, an undue delay should not occur, with little if any 

30 difficulty encountered by a content user 1 4 when attempting to access a 
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server or the like to obtain the decryption key |DK) for the encrypted content 
(EK{C)). 

It is to be noted that although the encrypted content (EK(C)) is 
distributed before the content release time (TR), and although the content 
5 decryption key (DK) for such encrypted content (EK(C)) is not released until 
the release time (TR), a content user 14 may receive the encrypted content 
(EK(C)) after the release time (TR), and/or may also receive the decryption 
key (DK) after the release time (TR). Moreover, since it is expected that a 
content user 1 4 may wish to obtain the decryption key (DK) for some time 
10 after the release time (TR), the key source is expected to provide such 

decryption key (DK) for at lease a minimum period of time after the release 
time (TR). 

In the course of obtaining the decryption key (DK) from a key 
source, and in one embodiment of the present invention, a content user 1 4 

15 may have appropriate hardware and/or software that automatically detects 
from received encrypted digital content (EK(C)) where the decryption key for 
such content is located (e.g., a web address for a key source 16 / server or 
the like) and may also automatically obtain such decryption key (DK) from 
the decryption key location when such decryption key (DK) is available. In 

20 such a situation, it may be preferable to package the encrypted digital 
content (EK(C)) with information on the key source 1 6 for obtaining the 
decryption key (DK), Likewise, it may be preferable to package the 
encrypted digital content (EK(C)) with the content release time (TR), as is 
seen in Fig. 4 A (omitted in Fig. 4B). 

25 In one embodiment of the present invention, a content user 14 

obtains the decryption key (DK) from the key source 1 6 in exchange for a 
payment. Accordingly, and as seen in Fig, 5, the key source 16 may include 
or be associated with a payment device 1 8 for obtaining a payment from the 
content user 14 in exchange for sending the decryption key (DK) to such 

30 content user 14. Such payment device 18 may be any appropriate payment 
device, including a credit payment device, a debit payment device, a cash 
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payment device, a charge payment device, or the like. Typically, the 
payment device 1 8 receives a credit, debit> or charge account number from 
the content user 14 and electronically charges the payment against an 
account associated with such number. 
5 As also seen in Fig. 5, the key source 1 6 may also include or be 

associated with a sending and/or releasing device 20 for sending / releasing 
the private key (DK) to the content user 14. Such sending / releasing device 
20 may be any appropriate device; for example, the device 20 may send an 
Internet web page, an electronic mail message, a regular mail message, etc. 

10 with the private key (DK) to the content user 14. 

As further seen in Fig. 5, the key source 1 6 may include or be 
associated with a receive device 22 for receiving a request for the 
decryption key (DK) from the content user 14. The receive device 22 may 
be any appropriate device. Typically, the receiving device 22 receives an 

15 Internet web page or request from the content user 14, an electronic mail 
message from the content user 14, or the like. 

Once the key source 16 has received a request for the 
decryption key (DK) from the content user 14 by way of a receive device 22 
(if necessary), has processed a payment by way of the payment device 1 8 

20 (if necessary), and has sent the decryption key (DK) by way of the 

send/release device 20 to the content user 1 4 such content user receives 
the decryption key (DK) (step 211 in Fig. 2) and may then store the received 
decryption key (DK) in an appropriate location. Such appropriate location 
will vary depending upon the application and the location of the 

25 corresponding encrypted content (EK(C)), and may include long-term storage 
(e.g., a hard drive) if the decryption key (DK) does not immediately decrypt 
the encrypted digital content (EK(C)) or short-term storage (e.g., RAM) if the 
decryption key (DK) immediately decrypts the encrypted digital content 
(EK(C)). Generally, any appropriate storage location may be employed. 

30 Thereafter, the content user 14 may then employ the decryption key (DK) to 
decrypt the encrypted digital content (EK(C)) (step 213 in Fig. 2), thereby 
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resulting in the content 12 in an unencrypted fornri. Such content 12 may 
then be rendered by an appropriate rendering device and/or stored in the 
decrypted form. 

Referring now to Fig. 3, in one embodiment of the present 
5 invention, the content provider 10 obtains the encryption key (EK) from an 
encryption l<ey database 24 that has a plurality of entries, where each entry 
includes a release time (TR) and a corresponding encryption key (EK) . As 
should be understood, for each entry in the encryption key database 24, the 
encryption key (EK) for such entry is for encrypting content 1 2 that is to be 

10 released at the release time (TR) of such entry. For example, then, when a 
content provider 1 0 wishes to release a piece of content 1 2 at a release time 
(TR) of December 31, 1999, at 1 1 :00 p.m. (1999/12/31 - 2300), such 
content provider 10 refers to the entry in the encryption key database 24 
having such release time (TR), as seen in Fig. 3, which in this case has a. 

15 corresponding encryption key (EK) of 66437G, and employs such encryption 
key (EK) to encrypt the content 12. 

In one embodiment of the present invention, each entry of the 
encryption key database 24 also includes a corresponding decryption key 
(DK) that corresponds to the encryption key (EK). Accordingly, and as also 

20 seen in Fig. 3, for a piece of content 12 encrypted to be released at a 
release time (TR) of December 31, 1999 at 11:00 p.m. (1999/12/31 - 
2300) and therefore encrypted with the encryption key (EK) of 66437G, the 
corresponding decryption key (DK) is 65G554. 

Preferably, the release times (TR) in the plurality of entries in 

25 the encryption key database 24 are regularly temporally spaced. 

Accordingly, and as seen in Fig. 3, hourly release times (TR) are provided, 
i.e. on December 31, 1999 at 10:00 p.m. (1999/12/31 -2200), at 11:00 
p.m. (1999/12/31 - 2300), at midnight (2000/01/01 - 0000), on January 1, 
2000 at 1:00 a.m. (2000/01 /01 - 0100), etc. Of course, entries may be 

30 other than hourly; for example, the periodicity of each entry may be daily, 
semi-daily, bi-dally, every 27 minutes\ every 8.5 hours, etc. Preferably, each 
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release time (TR) is with respect to a particular time zone or an absolute time 
- for example, Eastern U.S. time, coordinated universal time (UTC), etc. 

If desired, the content provider 1 0 may release each decryption 
key (DK) at the corresponding release time (TR). Accordingly, such content 
5 provider 10 can access each decryption key (DK) in the encryption key 
database 24. Alternatively, a third party may be responsible for releasing 
each encryption key (DK) at the appropriate release time (TR). In such a 
situation, the third party may construct the encryption key database 24 and 
publish such database 24 to the world with each release time (TR) and with 

10 each corresponding encryption key (EK), but without each corresponding 
decryption key (DK), Of course, the content provider 10 can also construct 
and publish the database 24 without the decryption keys (DK). 

Of course, the actual release of the decryption key (DK) at the 
release time (TR) may not in fact take place exactly at such release time 

15 (TR). For example, such actual release may be delayed for any of a variety 
of reasons. Whether or not the release of a decryption key (DK) for a release 
time (TR) actually takes place at such release time (TR), the important point 
is that the actual release of such decryption key (DK) does not take place 
before such release time (TR). Accordingly 'at the release time' and 

20 variations thereof may be interpreted to include 'no eariier than the release 
time' and corresponding variations thereof without departing from the spirit 
and scope of the present invention. 

Thus, any content provider 10 may consult such encryption key 
database 24 to select an encryption key (EK) based on a pre-selected release 

25 time (TR). Even though such content provider 10 does not know the 

decryption key (DK) that corresponds to such encryption key (EK) for such 
release time (TR), it is not necessary that such content provider 10 have 
knowledge of such decryption key (DK). Such content provider 10 need 
only encrypt the content 1 2 with the selected encryption key (EK), and then 

30 rely on the third party to release the corresponding decryption key (DK) at 
the corresponding release time (TR). 
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In one embodiment of the present invention, the content 
provider 10 encrypts the content 12 a single time with an encryption key 
(EK) from the encryption key database 24, as is seen in Fig. 4A. Thus, only 
one decryption key (DK) (released at the corresponding release time (TR) is 
5 necessary to decrypt the encrypted content. In another embodiment of the 
present invention, the content provider 1 0 encrypts the content 12a 
plurality of times with a plurality of encryption keys (EK) from the encryption 
key database 24, as is seen in Fig. 4B (with two encryptions). Accordingly, 
a content user 1 4 must obtain each corresponding decryption key (DK) to 

10 decrypt the encrypted content. As should be understood, the release time 
(TR) corresponding to each encryption key (EK) must be no later than the 
determined release time (TR) for the content 12. As should also be 
understood, multiple layers of encryption, as seen In Fig. 4B, protect against 
accidental early release of the content 1 2 should one of the corresponding 

15 decryption keys (DK) be accidentally or nefariously released early. 

In one embodiment of the present invention, the content 
provider 10 chooses the encryption key (EK) from one of several available 
encryption key databases 24. In particular, although it is to be understood 
that only a single such database 24 is necessary, it may be useful for 

20 administrative or security purposes to have multiple such databases 24. For 
example, one database 24 may provide encryption keys (EK) for finance- 
oriented content, while another database 24 may provide encryption keys 
(EK) for entertainment-oriented comment. Likewise, in a manner akin to that 
shown in Fig. 4B, encryption keys (EK) for the same or different release 

25 times (TR) may be selected from different databases 24 for purposes of 
multiple layers of encryption. 

Of course, in any instance where an encryption key (EK) may 
have originated from one of multiple databases 24, it is necessary to include 
a reference to the particular database 24 with the encrypted content 12. 

30 Accordingly, such particular database 24 is identified and may be accessed 
by a content user 1 4 at the appropriate release time (TR) to obtain the 
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decryption key (DK) corresponding to the encryption key (EK). If the 
database 24 is to be accessed on a network such as an intranet or the 
Internet, the reference is preferably a network addresis through which the 
database 24 can be accessed. 
5 The programming necessary to effectuate the processes 

performed in connection with the present invention is relatively straight- 
forward and should be apparent to the relevant programming public. Any 
particular programming, then, may be employed to effectuate the present 
invention. 

10 In the foregoing description, it can be seen that the present 

invention comprises a new and useful method of pre-releasing and obtaining 
digital content, and also an encryption key database 24 for use therewith. 
With such method and database 24, an information-seeker, and particularly a 
digital-content-seeker, can obtain access to information / digital content at a 

15 release time without undue delay, regardless of the size of the digital content 
or the speed of the access link through which the digital content is obtained. 
Importantly, in the present invention, each encryption key database is 
generally expected to be published by a well known trusted party which may or 
may not be different from the content publishers, and is expected to be 

20 distributed widely. Each decryption key (DK) is to be made broadly available at 
its specified time (TR), but not any sooner. It should be appreciated that 
changes could be made to the embodiments described above without 
departing from the invention concepts thereof. It should be understood, 
therefore, that this invention is not limited to the particular embodiments 

25 disclosed, but It is intended to cover modifications within the spirit and 
scope of the present invention as defined by the appended claims. 
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CLAIMS 

1 . A method of pre-releasing digital content having a pre- 
deternnined release time, the method comprising: 

encrypting the digital content with an encryption key, the 
encrypted digital content being decryptable by a decryption key 
5 corresponding to the encryption key; 

distributing the encrypted digital content to at least one 
content user prior to the release time; 

releasing the decryption key for the encrypted digital 
content to the content user at the release time, wherein the content user can 
10 then decrypt the encrypted digital content with the released decryption key. 

2. The method of claim 1 wherein the releasing step 
comprises sending the decryption key to the content user. 

15 3. The method of claim 2 wherein the releasing step 

comprises sending the decryption key to the content user by way of a device 
selected from a group consisting of an Internet web page, an electronic mail 
message and a regular mail message. 

20 4. The method of claim 1 wherein the encrypting step 

comprises encrypting the digital content with an encryption key from an 
asymmetric key pair. 

5. The method of claim 1 wherein the encrypting step 
25 comprises encrypting the digital content with an encryption key that is a 

symmetric key, wherein the decryption key is the encryption key. 

6. The method of cfaim 1 wherein the encrypting step 
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comprises encrypting the digital content with an encryption key selected 
from an encryption key database having a plurality of entries, each entry 
including a release time and an encryption key, the encryption key being 
selected from one of the entries in the database based on the release time of 
5 the entry and the determined release time of the digital content. 



comprises encrypting the digital content with an encryption key selected 
from an encryption key database having a plurality of entries, each entry 
10 including a release time and an encryption key, the release times In the 
plurality of entries being regularly temporally spaced. 



comprises encrypting the digital content a plurality of times with a plurality 
15 of encryption keys from the encryption key database, the release time 
corresponding to each encryption key being no later than the determined 
release time for the digital content. 

9. The method of claim 6 wherein the encrypting step 

20 comprises encrypting the digital content a plurality of times with a plurality 
of encryption keys selected from a plurality of encryption key databases. 

1 0. The method of claim 6 wherein the encrypting step 
comprises encrypting the digital content with an encryption key selected 

25 from an encryption key database having a plurality of entries, each entry 
including a release time, an encryption key, and a corresponding decryption 
key. 



7. 



The method of claim 6 wherein the encrypting step 



8. 



The method of claim 7 wherein the encrypting step 



30 



1 1 . The method of claim 1 further comprising providing the 
decryption key for at least a minimum period of time after the release time. 
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12. The method of claim 1 1 further comprising packaging the 
encrypted digital content with the release time. 

13. A method of pre-releasing digital content having a pre- 
5 determined release time, the method comprising: 

encrypting the digital content with an encryption key, the 
encrypted digital content being decrypt-able by a decryption key 
corresponding to the encryption key; the decryption key not being released 
to the content user until the release time; and 
10 distributing the encrypted digital content to at least one 

content user prior to the release time, wherein the content user cannot 
decrypt the encrypted digital content until the decryption key is released at 
the release time. 

15 14. The method of claim 13 wherein the encrypting stepj 

comprises encrypting the digital content with an encryption key from an 
asymmetric key pair. 

15. The method of claim 1 3 wherein the encrypting step 
20 comprises encrypting the digital content with an encryption key selected 

from an encryption key database having a plurality of entries, each entry 
including a release time and an encryption key, the encryption key being 
selected from one of the entries in the database based on the release time of 
the entry and the determined release time of the digital content. 

25 

1 6. The method of claim 1 5 wherein the encrypting step 
comprises encrypting the digital content with an encryption key selected 
from an encryption key database having a plurality of entries, each entry 
including a release time and an encryption key, the release times in the 

30 plurality of entries being regularly temporally spaced. 



wo 01/46782 PCT/USOO/42780 

-21- 

17. The method of claim 16 wherein the encrypting step 
comprises encrypting the digital content a plurality of times with a plurality 
of encryption keys from the encryption key database, the release time 
corresponding to each encryption key being no later than the determined 

5 release time for the digital content. 

18. The method of claim 15 wherein the encrypting step 
comprises encrypting the digital content with an encryption key selected 
from an encryption key database having a plurality of entries, each entry 

10 including a release time, an encryption key, and a corresponding decryption 
key. 

19. The method of claim 15 wherein the encrypting step 
comprises encrypting the digital content a plurality of times with a plurality 

15 of encryption keys selected from a plurality of encryption key databases. 

20. The method of claim 1 5 further comprising packaging the 
encrypted digital content with the release time. 

21 . A method of obtaining digital content having a pre- 
determined release time, the method comprising: 

firstly receiving prior to the release time the digital 
content encrypted according to an encryption key associated with the 
release time, the encrypted digital content being decrypt-able by a decryption 
key corresponding to the encryption key; 

secondly receiving at the release time the decryption key 
for the encrypted digital content; and 

decrypting the encrypted digital content with the released 

decryption key. 

22. The method of claim 21 wherein the second receiving 
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step comprises obtaining the decryption key from a key source. 



23. The method of claim 21 wherein the second receiving 
step comprises automatically detecting from the received encrypted digital 

5 content where the decryption key is located, and automatically obtaining 
such decryption key when available. 

24. The method of claim 21 wherein the second receiving 
step comprises obtaining the decryption key from a key source in exchange 

10 for a payment. 

25. The method of claim 21 wherein the second receiving 
step comprises obtaining the decryption key from a key source selected from 
a group consisting of an Internet web page and an electronic bulletin board. 



15 



20 



26. The method of claim 21 wherein the second receiving 
step comprises receiving the decryption key by way of a device selected 
from a group consisting of an Internet web page, an electronic mail message 
and a regular mail message. 



27. The method of claim 21 wherein the first receiving step 
comprises firstly receiving prior to the release time the digital content 
encrypted a plurality of times according to a plurality of encryption keys, 
each encryption key associated with a particular release time, the release 

25 time associated with each encryption key being no later than the 
predetermined release time for the digital content. 

28. The method of claim 21 wherein the first receiving step 
comprises receiving the encrypted digital content packaged with the release 

30 time. 
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29. The method of claim 28 wherein the second receiving 
step comprises automatically obtaining the decryption key at the release 
time. 

5 30. An encryption key database having a plurality of entries, 

each entry including: 

a release time for releasing a piece of digital content; and 
an encryption key for encrypting the digital content that 
is to be released at the release time, the encrypted digital content being 
10 distributed to at least one content user prior to the release time. 

31 . The database of claim 30 wherein each entry further 
includes a corresponding decryption key for decrypting the encrypted digital 
content, the decryption key for being released to the content user at the 
15 release time, wherein the content user can then decrypt the encrypted digital 
content with the released decryption key. 



32. The database of claim 30 wherein the release times in 
the plurality of entries are regularly temporally spaced. 

20 

33. A piece of digital content encrypted a plurality of times 
with a plurality of encryption keys from the encryption key database of claim 
30, the release time corresponding to each encryption key being no later 
than the determined release time for the digital content. 

25 

34. The encrypted digital content of claim 33 packaged with 
the release time. 



30 



35. A piece of digital content encrypted a plurality of times 
with a plurality of encryption keys from a plurality of the encryption key 
databases of claim 30. 
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36. The encrypted digital content of claim 30 packaged with 
the release time. 

5 37. In combination with the database of claim 30, a sending 

device for sending the decryption key to the content user. 

38. The sending device of claim 37 comprising a member of 
the group consisting of an Internet web page sending device and an 

10 electronic mail sending device. 

39. In combination with the database and the sending device 
of claim 37, a payment device for obtaining a payment from the content 
user in exchange for sending the decryption key to the content user. 

15 

40. In combination with the database of claim 30, a receiving 
device for receiving a request for the decryption key from the content user. 

41 . The receiving device of claim 40 comprising a member of 
20 the group consisting of an Internet web page receiving device and an 

electronic mail receiving device. 

42. ; The database of claim 30 wherein the encryption key and 
the decryption key are an asymmetric key pair. 

25 

43. The database of claim 30 wherein the encryption key and 
the decryption key are the same key. 



30 



44. A computer-readable medium having stored thereon a 

data structure having a plurality of entries, each entry including: 

♦ 

a first data field containing data representing a release 
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time for releasing a piece of digital content; 

a second data field containing data representing an 
encryption key for encrypting the digital content that is to be released at the 
release time, the encrypted digital content being distributed to at least one 
5 content user prior to the release time. 

45. The medium of claim 44 wherein each entry further 
includes a third data field containing data representing a corresponding 
decryption key for decrypting the encrypted digital content, the decryption 

10 key for being released to the content user at the release time, wherein the 
content user can then decrypt the encrypted digital content with the 
released decryption key. 

46. The medium of claim 45 wherein the encryption key in 
15 the second data field and the decryption key in the third data field are the 

same key. 

47. The medium of claim 44 wherein the release times in the 
first data fields of the plurality of entries are regularly temporally spaced. 



20 



48. In combination with the medium of claim 44, a sending 
device for sending the decryption key to the content user. 



49. The sending device of claim 48 comprising a member of 
25 the group consisting of an Internet web page sending device and an 

electronic mail sending device. 

50. In combination with the medium and the sending device 
of claim 48, a payment device for obtaining a payment from the content 

30 user in exchange for sending the decryption key to the content user. 
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51 . In combination with the medium of claim 44, a receiving 
device for receiving a request for the decryption key from the content user. 

52. The receiving device of claim 51 comprising a member of 
5 the group consisting of an Internet web page receiving device and an 

electronic mail receiving device. 



53. The medium of claim 44 wherein the encryption key and 
the decryption key are an asymmetric key pair. 

10 
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